Traffic Trace Info
DumpFile: 201104081400.dump
FileSize: 2806.43MB
Id: 201104081400
StartTime: Fri Apr 8 14:00:01 2011
EndTime: Fri Apr 8 14:15:01 2011
TotalTime: 900.17 seconds
TotalCapSize: -1905.38MB CapLen: 96 bytes
# of packets: 40357298 (28501.05MB)
AvgRate: 265.58Mbps stddev:46.28M
IP flow (unique src/dst pair) Information
# of flows: 1100158 (avg. 36.68 pkts/flow)
Top 10 big flow size (bytes/total in %):
2.8% 1.8% 1.5% 1.4% 1.2% 1.2% 1.1% 0.9% 0.8% 0.7%
IP address Information
# of IPv4 addresses: 564082
Top 10 bandwidth usage (bytes/total in %):
25.6% 9.5% 5.4% 3.0% 2.9% 2.3% 2.2% 2.2% 2.0% 1.8%
# of IPv6 addresses: 4005
Top 10 bandwidth usage (bytes/total in %):
17.8% 17.8% 11.8% 11.8% 11.3% 10.3% 10.2% 10.2% 8.3% 7.7%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201104081400.pktlen.png)
detailed numbers
[ 32- 63]: 8707401
[ 64- 127]: 8772256
[ 128- 255]: 2255832
[ 256- 511]: 1010946
[ 512- 1023]: 973948
[ 1024- 2047]: 18636915
Protocol Breakdown
![[protocol breakdown chart]](201104081400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 40357298 (100.00%) 29885515471 (100.00%) 740.52
ip 40124612 ( 99.42%) 29737889766 ( 99.51%) 741.14
tcp 26963156 ( 66.81%) 20429298004 ( 68.36%) 757.67
http(s) 10388216 ( 25.74%) 13822965350 ( 46.25%) 1330.64
http(c) 6808765 ( 16.87%) 1485475163 ( 4.97%) 218.17
squid 506795 ( 1.26%) 258730473 ( 0.87%) 510.52
smtp 190984 ( 0.47%) 107431913 ( 0.36%) 562.52
ftp 95734 ( 0.24%) 13552289 ( 0.05%) 141.56
pop3 27058 ( 0.07%) 12080073 ( 0.04%) 446.45
imap 10227 ( 0.03%) 5098624 ( 0.02%) 498.55
telnet 4032 ( 0.01%) 878830 ( 0.00%) 217.96
ssh 584496 ( 1.45%) 95535754 ( 0.32%) 163.45
dns 14730 ( 0.04%) 1540370 ( 0.01%) 104.57
bgp 583 ( 0.00%) 131459 ( 0.00%) 225.49
napster 501 ( 0.00%) 35300 ( 0.00%) 70.46
realaud 89 ( 0.00%) 8914 ( 0.00%) 100.16
rtsp 11818 ( 0.03%) 9954914 ( 0.03%) 842.35
icecast 8091 ( 0.02%) 553201 ( 0.00%) 68.37
hotline 24 ( 0.00%) 2211 ( 0.00%) 92.12
other 8311012 ( 20.59%) 4615323106 ( 15.44%) 555.33
udp 10702184 ( 26.52%) 8523789347 ( 28.52%) 796.45
dns 689039 ( 1.71%) 150447214 ( 0.50%) 218.34
realaud 16 ( 0.00%) 1698 ( 0.00%) 106.12
halflif 36 ( 0.00%) 2975 ( 0.00%) 82.64
starcra 23 ( 0.00%) 3013 ( 0.00%) 131.00
everque 415 ( 0.00%) 62904 ( 0.00%) 151.58
unreal 16 ( 0.00%) 2830 ( 0.00%) 176.88
quake 106 ( 0.00%) 8903 ( 0.00%) 83.99
cuseeme 1 ( 0.00%) 81 ( 0.00%) 81.00
other 9953528 ( 24.66%) 8367614323 ( 28.00%) 840.67
icmp 557300 ( 1.38%) 81838192 ( 0.27%) 146.85
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 1183 ( 0.00%) 248130 ( 0.00%) 209.75
ip6 1882738 ( 4.67%) 697114821 ( 2.33%) 370.27
other 17866 ( 0.04%) 5582002 ( 0.02%) 312.44
frag 178277 ( 0.44%) 134160388 ( 0.45%) 752.54
ip6 232686 ( 0.58%) 147625705 ( 0.49%) 634.44
tcp6 130280 ( 0.32%) 109580958 ( 0.37%) 841.12
http(s) 14539 ( 0.04%) 20247728 ( 0.07%) 1392.65
http(c) 27429 ( 0.07%) 2567665 ( 0.01%) 93.61
smtp 593 ( 0.00%) 524852 ( 0.00%) 885.08
ftp 40 ( 0.00%) 3592 ( 0.00%) 89.80
dns 310 ( 0.00%) 70011 ( 0.00%) 225.84
bgp 91 ( 0.00%) 20285 ( 0.00%) 222.91
other 87278 ( 0.22%) 86146825 ( 0.29%) 987.04
udp6 50066 ( 0.12%) 12029713 ( 0.04%) 240.28
dns 35101 ( 0.09%) 10173960 ( 0.03%) 289.85
starcra 2 ( 0.00%) 260 ( 0.00%) 130.00
everque 1 ( 0.00%) 108 ( 0.00%) 108.00
cuseeme 1 ( 0.00%) 113 ( 0.00%) 113.00
other 14961 ( 0.04%) 1855272 ( 0.01%) 124.01
icmp6 19561 ( 0.05%) 3022455 ( 0.01%) 154.51
ip6 81 ( 0.00%) 11108 ( 0.00%) 137.14
pim6 31 ( 0.00%) 4216 ( 0.00%) 136.00
other6 32667 ( 0.08%) 22977255 ( 0.08%) 703.38
tcpdump file: 201104081400.dump.gz (970.85 MB)